Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: sS8erQ39drkLUhOb5UJKd2SVyQwEJg4rXKJnoDN8r6s=
Subject key identifier: 10:B3:8E:60:BB:92:B1:50:88:7E:A3:83:BA:D3:D1:0A:F1:C4:81:12
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019676B13CEB9620B5F9171AE150184DA91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 14B0
Signing time: Sun 27 Apr 2025 10:00:48 +0000
Manifest this update: Sun 27 Apr 2025 10:00:48 +0000
Manifest next update: Mon 28 Apr 2025 10:00:48 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: Hb91aNNYTta6RWQ4fxR6CuazTIsLsU7hyHpavBGB4Z8=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:3c:eb:96:20:b5:f9:17:1a:e1:50:18:4d:a9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Apr 27 10:00:48 2025 GMT
Not After : Apr 28 10:00:48 2025 GMT
Subject: CN=10b38e60bb92b150887ea383bad3d10af1c48112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:92:83:de:df:8c:8c:11:db:33:57:0d:81:
4c:26:ec:ac:92:62:11:6d:2e:0e:2e:eb:d6:7e:ca:
8e:2b:21:0f:7d:64:2b:e5:72:ea:8b:01:b4:31:63:
ee:a2:5d:e5:1f:35:fa:96:48:da:77:48:c8:4b:74:
15:ff:89:90:ef:bf:0f:49:50:64:0f:7f:af:51:22:
8c:ec:ad:d7:e6:bc:7d:32:92:ed:ae:95:55:e7:0f:
a8:46:a8:f0:97:5a:3b:2c:50:15:43:57:ef:86:c6:
43:c2:b4:97:9c:a5:79:7a:2f:b1:92:71:82:74:f4:
98:05:ab:65:42:39:66:b8:69:95:b7:fa:e0:52:54:
eb:9a:76:11:6b:88:c7:67:07:1b:e5:1d:a3:e4:c1:
fa:46:49:fe:6e:b3:05:78:f6:26:8d:38:12:e7:6d:
81:ac:d8:a7:25:c8:da:56:7f:3f:1b:7e:cd:80:e3:
49:3b:ac:01:fb:6b:b9:f0:e8:bd:05:3f:02:63:13:
3a:65:50:4f:61:fa:1a:f3:53:2e:7b:f9:11:dc:1f:
4b:52:db:66:88:a0:5a:55:b6:fe:b3:10:cc:30:1b:
30:7c:5f:9c:d5:e5:75:b7:ee:1c:56:48:79:66:e1:
9a:eb:53:aa:6f:72:42:16:3a:f2:53:40:8d:da:7b:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:8E:60:BB:92:B1:50:88:7E:A3:83:BA:D3:D1:0A:F1:C4:81:12
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6f:30:e2:19:ae:0d:37:9e:38:85:32:11:2e:e5:f4:0a:9f:
a7:f2:40:02:7e:a6:2d:35:27:5f:57:ac:48:e7:cf:f7:5e:ff:
90:37:e7:8a:35:df:86:85:ef:9e:6b:b5:c4:de:6f:f4:07:b6:
f3:56:10:28:64:be:2b:70:39:0f:36:55:7b:7a:10:09:2c:df:
af:5c:46:98:02:c6:91:a5:c6:92:7a:a1:fa:9a:6c:8d:ae:66:
09:d7:44:74:f1:c4:aa:32:c2:60:b6:71:81:71:2a:eb:02:0d:
0f:04:b9:af:06:31:8b:70:ae:96:f4:3c:5c:82:dc:5f:1a:a4:
bf:38:48:b5:6c:cd:e0:ac:13:3b:06:45:5d:f0:15:d9:d4:36:
94:c8:20:35:5d:54:a7:06:73:e3:cc:7b:c9:6e:4c:5b:29:86:
32:59:fc:65:04:22:34:82:67:05:fc:45:b8:6d:ae:e8:e5:8e:
aa:69:e1:5b:38:d9:af:12:26:92:a2:d9:f0:9e:e3:d5:e6:0c:
2a:ed:d0:07:36:28:3c:a8:13:77:4b:bc:e7:34:de:e6:17:b2:
8e:ae:0b:88:dc:a0:2d:81:33:d8:65:32:a7:ce:da:61:5f:37:
19:a3:83:03:fc:75:9c:6e:e8:52:67:a8:06:2c:19:29:84:4e:
72:6f:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:25 2025 by rpki-client